8679 matches found
PT-2011-4237
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.23 Mozilla Firefox versions 4.x through 5 Thunderbird versions prior to 6.0 SeaMonkey versions prior to 2.3 Description The issue arises from improper handling of "location" as the name of a frame, allowin...
XSS via plugins and shadowed window.location object — Mozilla
Mozilla developer Boris Zbarsky reported that a frame named "location" could shadow the window.location object unless a script in a page grabbed a reference to the true object before the frame was created. Because some plugins use the value of window.location to determine the page origin this cou...
CVE-2011-2856
Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...
Design/Logic Flaw
Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...
CVE-2011-2856
Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...
CVE-2011-2856
Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...
CVE-2011-2856
CVE-2011-2856 involves Google Chrome/Chromium’s V8 engine. The vulnerability allows remote attackers to bypass the Same Origin Policy via unspecified vectors in Google V8 used by Chrome before 14.0.835.163. Impact is exposure of cross-origin data and potential manipulation of web content; exploit...
CVE-2011-2856
Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...
CVE-2011-2856
Removed by vendor...
CVE-2011-2856: Origin Validation Error
Google V8, as used in Google Chrome before 14.0.835.163, allows remote attackers to bypass the Same Origin Policy via unspecified vectors...
PT-2011-4152
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 14.0.835.163 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Recommendations For versions prior to 14.0.835.163, update to version 14.0.835.163 or later to...
Mozilla Products Multiple Vulnerabilities - Sep 11 (Windows)
The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnsep11win01.nasl 7019 2017-08-29 11:51:27Z teissa $ Mozilla Products Multiple Vulnerabilities - Sep 11 Windows Authors: Madhu...
Mozilla Products Multiple Vulnerabilities (Sep 2011) - Windows
Mozilla Firefox/Thunderbird/Seamonkey is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2011-2826
Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...
Design/Logic Flaw
Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...
CVE-2011-2826
Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...
UBUNTU-CVE-2011-2826
Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...
CVE-2011-2826
Google Chrome before 13.0.782.215 allows remote attackers to bypass the Same Origin Policy via vectors related to empty origins...
CVE-2011-2826
CVE-2011-2826 affects Google Chrome prior to 13.0.782.215. The vulnerability enables remote attackers to bypass the Same Origin Policy via vectors related to empty origins, potentially compromising cross-origin protections. The provided documents do not include specific exploit details, affected ...